vikarti.anatra/Skyvern
1
0
Fork 0
mirror of https://github.com/Skyvern-AI/skyvern.git synced 2026-07-09 16:09:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

security: add .npmrc ignore-scripts to skyvern-ts/client (#7094)
Some checks are pending
Run tests and pre-commit / Run tests and pre-commit hooks (push) Waiting to run
Details
Run tests and pre-commit / Frontend Lint and Build (push) Waiting to run
Details
Run tests and pre-commit / pip Package Smoke Tests (3.11) (push) Waiting to run
Details
Run tests and pre-commit / pip Package Smoke Tests (3.13) (push) Waiting to run
Details
Publish Fern Docs / run (push) Waiting to run
Details

Browse source 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Aaron Perez <aperez0295@gmail.com>
This commit is contained in:
Shuchang Zheng 2026-07-06 20:15:52 -07:00 • committed by GitHub
parent 298ab5550c
commit ef9476e8fa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
skyvern-ts/client/.npmrc Normal file
View file

@ -0,0 +1,5 @@
# Supply chain protection: do not run lifecycle scripts (preinstall, install,
# postinstall) on npm install. Blocks worms like "Shai-Hulud" from executing
# on a compromised dependency before we notice. If a package genuinely needs
# its install script, use @lavamoat/allow-scripts to allowlist it.
ignore-scripts=true